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SUBSTITUTE SPECIFICATION (Clean Copy) 

PROCESS AND HIGHLY SECURE SYSTEM 
FOR THE DISTRIBUTION OF AUDIOVISUAL STREAMS 

Related Application 

[0001] This is a §371 of International Application No. PCT/FR2005/000636, with an 
international filing date of March 16, 2005 (WO 2005/101847 Al, published October 27, 
2005), which is based on French Patent Application No. 04/50521, filed March 16, 2004. 

Technical Field 

[0002] This disclosure relates to the area of the highly secure distribution of digital 
audiovisual sequences. 

[0003] US 6,351,538 discloses protection of a digital video stream. The protection is 
applied when the video stream is in the process of being digitized. The digital video 
stream is considered as being composed of a stream of video images coded by 
compensation of movement and a second stream of video image called a "reference" and 
serving to predict movement. The reference stream of video images is encrypted and the 
quantity of data to be encrypted to protect the stream is therefore reduced. The 
parameters that permitted this encryption operation to be realized are stored in the digital 
video stream in a part reserved for this purpose. The encryption of the reference images 
is sufficient to protect the content of the digital video stream because the rest of the 
digital video stream is composed of video image coded by compensation of movement 
from the reference video image stream. A double encryption operation is carried out, an 
encryption of the reference images by a first simple encryption function (application of 
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an XOR or exclusive) then a complex encryption of the parameters of the first function 
by a second more complex encryption function. This double encryption allows the 
protection to be concentrated on the data quantity even less than the quantity that the 
reference images represent. The stream of video images coded by compensation of 
movement and the stream of reference video images (then protected) are then multiplexed 
to form the protected compressed video stream. 

[0004] That system does not provide a separation into two streams. It describes a 
decomposition into two sets composed of reference video images and video images 
obtained by compensation of movement. Thus, the problem is to preserve the format of 
the digital video stream and bring about the protection a posteriori of the compression, 
which is not the case in US '538 in which it is clearly stated that the protection is made 
during the encoding of the video stream. 

[0005] Finally, no analysis of the original digital stream is preformed in order to 
analyze the conformity of the data in it. Consequently, US '538 may render the protected 
digital video stream not in conformity with the standard from which it issued. 
[0006] WO 03/007608 discloses protection of a digital video stream realized by an 
encryption method at the level of variable security. 

[0007] The compressed video stream is divided into blocks with a fixed size. The 
protection is performed on these digital data blocks. The protection is performed on each 
block in turn. Only several bytes are encrypted in each block and the rest of the block 
remains unchanged. The choice of bytes to be protected is obtained by a pseudorandom 
generator or by a "look-up table". The byte selected can also be encrypted by using a 
"look-up table". Only three per cent of each block has to be encrypted to obtain a 
satisfactory degradation of the compressed digital stream rendering it illegible for a 
standard rendering apparatus. 

[0008] That system does not perform a separation into two compressed video streams, 
but performs its decomposition into blocks of a fixed size that are treated independently 
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to encrypt some date of each block. The goal of that encryption operation is to render the 
compressed video stream illegible for a standard decoder. 

[0009] It is currently possible to transmit audiovisual programs in digital form via 
broadcasting networks of the microwave, cable, satellite type, etc., or via 
telecommunication networks of the DSL (Digital Subscriber Line) or BLR (Loop Local 
Radio) type or via DAB networks (Digital Audio Broadcasting) as well as via any 
wireless telecommunication network of the GSM, GPRS, EDGE, UMTS, Bluetooth, 
WiFi type, etc. Moreover, to avoid pirating works broadcast in this manner, they are 
frequently encrypted or scrambled by various well-known means. 

[0010] W. Zeng et al. published in the ACM Multimedia Proceedings of the 
International Conference in October, 1999 and titled "Efficient Frequency Domain Video 
Scrambling for Content Access Control" is also known for the area of encryption. That 
article describe a method of protecting digital data coding a multimedia content. The 
method is based on pseudorandom generators for generating three base pseudorandom 
operations (bit inversion, permutation and rotation of block of coefficients) that can be 
combined and controlled by encryption keys. The set of original data is present in the 
protected stream and access to the original content is entirely conditioned on possession 
or not of encryption keys. However, that solution does not use different modelings of 
pseudorandom generators nor data of the original stream such as a cryptographic key. 
Given that all the original data of the stream remains inside the protected stream, that 
method represents a classic encryption solution and, consequently, does not correspond to 
this disclosure. 

[0011] Concerning the separation of an audiovisual stream into two parts in order to 
protect it, "Protecting VoD the Easier Way' 5 , Griwodz et al., Proceedings of the ACM 
Multimedia, September, 1 998 describes a process of distribution via broadband networks 
or temporary servers and a point to point secure connection of protected multimedia 
content whose access is controlled and traced. The original auto visual stream is 
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deliberately corrupted by a predetermined modification of certain bytes in the stream 
without any analysis of the structure and the content of the stream, therefore, without 

taking account of the conformity with the native format, which bytes are selected 

» 

according to a predefined law (Poisson's law). A signal permitting reconstruction is 
transmitted subsequently to the client at the moment of viewing the content: A key is first 
communicated to the client that allows the client to recalculate emplacement of the 
corrupted bytes in the stream. Then, a signal containing the original bytes is sent to the 
client after encryption to reconstruct the initial stream. Reconstruction of the stream is 
thus conditioned by a simple key and consequently does not provide a high level of 
security. 

Summary 

[0012] This disclosure relates to a process for distributing audiovisual sequences 
according to an original stream format having a succession of frames, the original stream 
on which an analysis is made, prior to transmission to client equipment, to generate a first 
modified main stream and complementary information, then the modified main stream 
and the complementary information are transmitted separately to equipment of an 
addressee, and for which a synthesis of a stream in the original format is calculated on the 
equipment of the addressee as a function of the modified main stream and the 
complementary information, wherein the analysis of the original stream includes: 

an operation application stage comprising modelings generating sequences of 
pseudorandom values with known parameters, 

a stage for the extraction of original data as a function of pseudorandom 
sequences, and 

a stage for storage of the parameters of the modelings in the complementary 
information. 
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[0013] The disclosure also relates to a system for producing an audiovisual stream, 
including at least one multimedia server containing original audiovisual sequences, an 
apparatus analysis of the audiovisual stream for separation of an original video stream 
into a modified main stream and into complementary information as a function of the 
analysis, at least one telecommunication network for transmission and at least one 
apparatus in the equipment of the addressee for reconstruction of the audiovisual stream 
as a function of the modified main stream and the complementary information. 
[0014] The disclosure further relates to a process for distributing audiovisual 
sequences according to an original stream format having a succession of frames 
including: 

performing modelings on the original stream to generate sequences of 
pseudorandom values with no parameters; 

extracting original data as a function of pseudorandom sequences; 

generating a first modified main stream and complementary information; 

storing at least one parameter from the modelings in the complementary 
information; 

separately transmitting the modified main stream and the complementary 
information to an addressee; and 

synthesizing a stream in original format by equipment of the addressee as a 
function of the modified main stream and the complementary information. 

Brief Description of the Drawings 

[0015] Fig. 1 graphically shows a pseudorandom generator. 

[0016] Fig. 2 schematically shows selected aspects of complementary information. 
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[0017] Fig. 3 schematically shows an example of a secure system for distributing 
audiovisual streams. 

Detailed Description 

[0018] The invention provides a process and a system that permit the visual and/or 
auditory protection of a digital audiovisual sequence issued from a digital compression 
standard or from a digital compression norm, the distribution in a highly secure manner 
of the sequence via a telecommunication network and reconstitution of its original 
content from a protected audiovisual stream on a recomposition module of the equipment 
of the addressee. 

[0019] The invention relates more particularly to an apparatus capable of transmitting 
in a secure manner via a telecommunication network a set of high-quality audiovisual 
streams to a viewing screen and/or an audio output belonging to a terminal or to a display 
apparatus such as a television screen, a computer or even a mobile telephone, a mobile 
terminal of the PDA type (Personal Digital Assistant) or the like while preserving the 
audiovisual quality, but avoiding fraudulent use such as the possibility of making pirated 
copies of the broadcast contents. 

[0020] We disclose a process and a client-server system that protects the audiovisual 
contents by separating them into two parts, which second part is indispensable for 
reconstitution of the original stream, the latter of which is restored as a function of the 
combination of the first part. 

[0021] The process may separate the audiovisual stream into two parts in such a 
manner that the first part called the "modified main stream' 1 contains the quasi-totality of 
the initial information, e.g., more than 99%, and a second part called "complementary 
information" containing targeted elements of the original information and that is of a very 
small size relative to the first part. 
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[0022] This disclosure also concerns modelings of pseudorandom processes used to 
define at which location and which modification will be applied, which modelings are a 
mathematical model describing a random natural phenomenon. These pseudorandom 
processes are initialized by different grains. The random process generating the grains is 
also modified dynamically by a set of parameters relative to its modeling during 
generation of the pseudorandom sequence. 

[0023] These initialization grains and modeling parameters are advantageously the 
data extracted from the original stream. The protection applied to the contents distributed 
by the secure system is advantageously based on the principle of deletion and 
replacement of certain information present in the encoded original audiovisual signal by 
any method such as: Substitution, modification, permutation or shifting of the 
information. This protection is also based on a knowledge of the structure of the digital 
stream. This solution extracts and permanently preserves in a secure server connected to 
the broadcasting and transmission network a part of the data of the audiovisual program 
recorded at the user's or directly broadcasted in this complementary information, which 
part is of prime importance for reconstituting the audiovisual program, but has a volume 
that is very small relative to the total volume of the digital audiovisual program recorded 
at the user's or received in real time by the user. The lacking part (the complementary 
information) will be transmitted via the secure network advantageously distributed by 
broadcasting or transmission at the moment of viewing and/or hearing of the audiovisual 
program. The data removed in the original audiovisual program is advantageously 
substituted to form the modified main stream by random or calculated data called decoys. 
[0024] The fact of having removed and substituted with decoys a part of the original 
data of the original audiovisual stream during generation of the modified main stream 
does not permit restitution of the original stream only from the data of the modified main 
stream. The modified main stream may be totally compatible with the format of the 
original stream and can therefore be copied and read by a reader, but it is completely 
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incoherent from the viewpoint of human visual and auditory perception. The modified 
main stream may have any format. 

[0025] Once the digital stream is separated into two parts, the largest part, the 
modified main stream, is then transmitted via a classic broadcasting network whereas the 
lacking part, the complementary information, is sent on demand via a narrow band 
telecommunication network such as the classic telephone networks or cellular networks 
of the GSM, GPRS, EDGE or UMTS or by using a small part of a network of the DSL or 
BLR type, or by using a subset of the broadband shared on a cable network, or also via a 
physical support such as a memory card or any other support. In particular, the two 
networks can be combined while retaining the two separate transmission paths. The 
audiovisual stream is reconstituted on the addressee's equipment by a synthesizing 
module from the modified main stream and the complementary information sent piece by 
piece during use of the audiovisual stream. 

[0026] The fact that the complementary information represents a quite small part of 
the original stream, e.g., 1%, allows it to be sent through networks with a low 
transmission rate. When the modified main stream has already been downloaded on the 
hard disk of the equipment of the addressee, the complementary information is preferably 
sent via a narrow band network. Complementary information with a low size facilitates 
its distribution on every type of network and contributes to reinforcement of security. 
[0027] The disclosure further concerns an analysis module that implements a securing 
process in such a manner as to optimize the structure and content of the complementary 
information with the aid of different algorithms and modelings to minimize the size of the 
complementary information and to reinforce security. 

[0028] The disclosure also concerns a process for distributing audiovisual sequences 
according to an original stream format constituted of a succession of frames, the original 
stream on which an analysis is made, prior to transmission to the client equipment, to 
generate a first modified main stream and complementary information, then the modified 
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main stream and complementary information are transmitted separately to the equipment 
of the addressee, and for which a synthesis of a stream in the original format is calculated 
on the equipment of the addressee as a function of the modified main stream and the 
complementary information, which analysis of the original stream is constituted by: 

an operation application stage comprising modelings generating sequences of 
pseudorandom values with known parameters, 

a stage for extraction of original data as a function of the pseudorandom 
sequences, and 

a stage for the storage of parameters of the modelings in the complementary 
information. 

[0029] The parameters may be stored integrally in the complementary information. 
The parameters may also be stored partially in the complementary information. 
[0030] The pseudorandom values advantageously represent information relative to at 
least one characteristic of the data extracted in the original stream. These pseudorandom 
values advantageously represent information relative to the position of the data extracted 
in the original stream. Furthermore, the parameters of the modelings are random. 
[003 1] The parameters of the modelings may be data extracted from the original 
stream. The modelings may be random. 

[0032] The modelings are advantageously generated from at least one characteristic of 
the analysis equipment. The modelings are advantageously stored in the analysis 
equipment. The modelings used by the analysis equipment may be sent in advance by the 
equipment of the addressee. The modelings may also be stored in a smart card of the 
equipment of the addressee. 

[0033] Synthesis of the original stream is preferably carried out as functions of the 
parameters of the modelings, reproducing the pseudorandom values obtained during the 
analysis stages. 

[0034] Furthermore, the process is lossless. 
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[0035] We also disclose a system for implementation of the process, comprising at 
least one multimedia server containing the original audiovisual sequences, comprising an 
apparatus for analysis of the audiovisual stream for separation of the original video 
stream into a modified main stream and complementary information as a function of the 
analysis, at least one telecommunication network for transmission and at least one 
apparatus in the equipment of the addressee for reconstruction of the audiovisual stream 
as a function of the modified main stream and the complementary information. 
[0036] The complementary information represents the set of data and information 
necessary for reconstruction of the original stream. It advantageously contains the 
original extracted values, their positions and information necessary for reconstruction, 
that are relative to the characteristics of the original data of the stream. However, in this 
instance, the information about the position of the original data have a size on the order 
of 50% of the complementary information. Compression of the complementary 
information proved to be ineffective on account of the fact that the positional information 
is statistically independent and therefore has a low redundancy. Moreover, the presence 
of voluminous positional information limits security all the more because there is so 
much original data that is not extracted, substituted by decoys and stored in the 
complementary information. 

[0037] We reduce the amount of information contained in the complementary 
information concerning the original data and define it with the aid of modelings. In this 
manner, the information is reproduced during reconstitution of the original stream, the 
modelings and their parameters being known. 

[0038] Representative, selected examples are described below with respect to 
modelings and algorithms of generators of pseudorandom sequences, initialized by 
random processes. 

[0039] A random process is an, e.g., temporal signal s(t) for which the value can not 
be provided in advance whatever the considered instant. Such a process is generated 
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either by using unforeseeable physical phenomena (such as the phenomena of the 
degradation of the atoms of radioactive elements) or by using pseudorandom processes 
coupled with random factors (such as an algorithm of the "wheel of fortune) type. Very 
complex (depending on phenomena not always mastered by one skilled in the art) and 
with constraints on the execution time that are too great on a computer, random 
processes are generally used in combination with pseudorandom processes. Random 
processes are used for modeling and initialization of pseudorandom generators. 
[0040] A pseudorandom process is a deterministic process that allows generation of a 
sequence of numbers that possesses a distribution selected in a more or less uniform 
manner. These processes are initialized by a grain that serves as a starting point for the 
sequence. The advantage of pseudorandom processes is that they are rapid (short 
execution time for a computer) because they are issued from not very complex 
mathematical calculations. The quality of a pseudorandom generator is measured as a 
function of its period (number of minimal values that the sequence contains before 
reproducing itself identically) and the equidistribution that it will supply in several 
directions. An efficient pseudorandom generator has a long period and an 
equidistribution in a large number of direct actions. 

[0041] An example of a pseudorandom generator of numbers (congruent linear 
pseudorandom generator) is described by the following expression, in which S n is the 
term of the sequence, M-l the maximal value for the term S n? and A and B are 
respectively the slope and the ordinate at the origin of a straight line F of the equation: 
S n+ i=(S n *A+B) mod (M). 
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The term S n represents in this case the grain maintained as follows: 

grain = (grain * 0x5DEECE66DL + OxBL) & 

((1L«48)-1; 

S n =grain 

A=0x5DEECE66DL 
B=0xBL 

mod (M) = &((1L«48)-1); 

[0042] This pseudorandom generator has a theoretical period of 2 A 48, the operation & 
((1L « 48) -1) ensures the periodicity by rejecting any value greater than 2 A 48. 
Multiplier A is selected in such a manner that an oscillation is rapidly obtained. 
[0043] Fig. 1 illustrates an example of a pseudorandom generator. 
[0044] Successive values are generated from So placed on the abscissa. The ordinate 
corresponding to the projection of So on straight line F with slope A gives the value of the 
following grain Si on the ordinate, the value of which grain placed on the abscissa and 
projected from straight line F on the ordinate will give the value of the future grain S2, 
and thus this iterative operation produces a sequence of grains. 

[0045] When the grain is greater than or equal to the value S max = (M-B)/A, the rest of 
the entire division (the "modulo" function) of the value generated for S max divided by M 
is sent back to the generator to continue the sequence, result of the congruence of the 
modulo function. 

[0046] Representative, selected examples are described in the following that 
implement modelings of congruent linear functions that produce pseudorandom values 
that are used during the analysis and synthesis. 

[0047] The analysis performed to separate the original stream into a modified main 
stream and complementary information advantageously uses a large number of modelings 
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of pseudorandom processes to guarantee a maximum of randomness and to thus furnish 
elevated security. This analysis is constituted of the following stages: 

an operation application stage comprising modelings of pseudorandom processes, 
generating sequences of pseudorandom values with known parameters, 

a stage for extraction of the original data as a function of the pseudorandom 
sequences, 

a stage for introduction of the decoy data in place of the extracted original data, 
a stage for storage of the parameters of the modelings in the complementary 
information. 

[0048] The protection process for each of the different digital formats has its own 
analysis algorithm constituted of the enumerated stages in guaranteeing an audiovisual 
degradation. Including the pseudorandom processes, the analysis ensures the unicity and 
effectiveness of the protection. It is at this moment of the process that the degree of 
security introduced into a stream is defined from the possible combinations generated by 
the pseudorandom process. The pseudorandom sequences generated during the analysis 
are advantageously used for: 

- Selecting the position of data to be extracted, 

- Selecting the number of data to be extracted for a given stream portion, 

- Selecting the size of the stream portion to be protected, 

- Selecting the number of portions to be protected, 

- Selecting the decoys and inserting them in place of the original data. 

[0049] As concerns the evaluation of the degree of security introduced, the known 
AES ("Asymmetric Encryption System") protection process by encryption is taken as 
reference from the prior art. The key has a length of 128 bits and the number of possible 
combinations is therefore: 
2 128 =3.40e+8 possibilities of a key with 128 bits. 
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[0050] We pose the hypothesis that all the events are random, a stream portion with a 
length of 300 bytes is taken in which "n" = 5 decoys, for example, is added, each of 
which decoys has a length of one byte. The following result is obtained: An account is 
taken of all the combinations of 5 bytes among 300, which makes l,96e+12 possible 
words, knowing that there are 2 40 binary words or l,10e+12 possible words, and a total of 
2.37e+34 possibilities are finally obtained. It was assumed that the number of decoys for 
realizing this calculation was known, namely, 5 decoys for a portion of 300 bytes. In the 
case in which the value of f, n" would not be known, the total number of possibilities is 
obtained by summing the results for each of the "n" from 1 to 300, which produces a 
considerably augmented number of possibilities. With 300 decoys there is a combination 
of 300 bytes among 300 and 2 2400 possible binary words, therefore, plus n (the number of 
decoys) is great the more the number of possibilities increases. However, the preceding 
hypothesis considers that all the samplings are random except in a real case of an analysis 
algorithm the sequences generated are pseudorandom, therefore, an ill-intentioned person 
could decide to search for the grain from which the pseudorandom sequence was 
generated. Knowing that the positions were generated by a grain of 32 bits over an 
interval of 300 values, this yields 2 32 *256 5 =4.73e+21 possibilities for finding the values 
of the positions of the decoys (for a grain of 64 bits, 2.10e+31 possibilities are obtained, 
and likewise it is necessary to make the sum from 1 to 300 for each possible "n" in the 
portion described). In conclusion, it is easier for an ill-intentioned person to search for 
the grain than an exhaustive search of the positions of the decoys from the protected 
stream. However, when a grain coded for 128 bits is selected, the number of possibilities 
for the grain is identical to, the number of keys possible for the AES method with a key 
coded for 128 bits. 

[0051] Since an algorithm can not be composed solely of random processes as 
concerns rapidity of execution, the use of a pseudorandom generator becomes necessary 
for which generator a random grain is used that permits the desired security level to be 
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fixed, e.g., by selecting a grain with a length of 128 bits. Likewise, a judicious choice of 
the parameters A, B, M and So is carried out in such a manner as to generate 
pseudorandom sequences with different types of distribution. 

[0052] In this instance, a criterion for the evaluation of the security is the number of 
grains necessary for the process and the manner in which the sequences are generated. 
[0053] The parameters A, B, M and So for modeling the generator are advantageously 
selected randomly and remain unchanged for a portion of a given stream, e.g., for N 
consecutive bytes. At the end of this portion the parameters A, B, M and So are modified, 
thus, reselected in a random manner. In this manner, the set of modeling parameters A, 
B, M and So is changed every N bytes and N itself is advantageously random. The set of 
modeling parameters A, B, M and So is preferably changed each time that the value S max 
is exceeded. 

[0054] As concerns recomposition of the original stream during the synthesis on the 
equipment of the addressee, it is indispensable to recover the original values of the data 
extracted from the original stream and their placements in the stream. However, storing 
their true values and their placements in the complementary information produces 
complementary information containing much data that can be recalculated from the 
modeling parameters used during the analysis. Consequently, optimization of the size of 
the complementary information is performed by storing in the interior only the original 
extracted data and modeling parameters from which the positions and other 
characteristics of the original data are reproduced during the synthesis on the equipment 
of the addressee. Consequently, since the data relative to the original positions is on the 
order of 50% of the complementary information, the size of the complementary 
information is greatly reduced, all the while ensuring audiovisual degradation and 
increasing security because it furnishes the possibility of extracting more original data 
and of introducing more decoys. 

[0055] The original data may be extracted without introduction of decoys in its place. 
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[0056] The analysis determining the characteristics of the data to be extracted is 
carried out taking three constraints into account: 

- The degradation of the content, 

- The security, 

- The transmission rate of the complementary information. 

Since the relationship between these three constraints is very complex, it is proposed to 
reduce the size of the complementary information without, however, reducing security 
and audiovisual degradation. 

[0057] Fig. 2 represents the complementary information containing values generated 
by the modeling, namely, the positions P (Fig. 2a) and the original extracted data D. 
Figure 2b represents the complementary information containing the modeling parameters 
S and the original extracted data D. 

[0058] The complementary information preferably contains original data D. The 
modeling parameters or grains S from which these positions are generated are backed up 
in the place of positions P. The grains are advantageously data extracted from the 
original stream, thus guaranteeing high randomness or a combination of the data, which 
brings about an increase in the complexity of the chain between grains. For example, a 
grain is selected for the first position using a random process and a second grain 
combination of the first grain with the value of the extracted data is made for the second 
position of data to be extracted, and so forth. This operation guarantees for each random 
process a random re-initialization of the generator (the extracted value being random). A 
grain of 64 bits or 128 bits generated by a true random process is selected to avoid a 
portion of the protected stream from being compromised in the case that the first grain 
would be found. It proved to be difficult in this case to reconstitute the original positions 
since the positions are modeled from the grain in combination with the values of the 
original data of the stream. 
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[0059] The original content of the stream is restored from value S of the grain or the 
parameters or the model and the original data contained in the complementary 
information by the synthesis module that will reconstruct the original stream on the 
equipment of the addressee. 

[0060] The complementary information is preferably specific to the analysis 
equipment that generates it with the aid of characteristics belonging to the equipment. 
Consequently, the complementary information will be freely broadcast because it can be 
interpreted solely by the analysis equipment or by other analysis equipment having 
exactly the same characteristics. The pseudorandom generator advantageously has a 
modeling belonging to the analysis equipment and/or relative to at least one characteristic 
belonging to the analysis equipment. The modeling may be stored in the analysis 
equipment. The modelings may also be stored in the equipment of the addressee. The 
modelings are advantageously stored in a smart card of the equipment of the addressee. 
The modelings of the equipment of the addressee are preferably sent to the analysis 
equipment for generation of complementary information personalized for the equipment 
of the addressee. 

[0061] Fig. 3 shows a scheme with a purely explanatory description of a preferred 
client-server system for implementing the process. 

[0062] Original audiovisual digital stream 1 to be secured is passed via a link 2 to 
analysis and protection module 31 that generates modified main stream 32 in a format 
advantageously identical to the format of input stream 1, aside from which certain 
original data was replaced by values different from the original ones and stored on server 
3. The complementary information 33 in any format contains the values of the original 
data and the modeling parameters relative to the characteristics of the original modified, 
replaced, substituted or moved data. The complementary information 33 is also stored on 
server 3 . 
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[0063] Modified main stream 32 is then transmitted via high-throughput network 5 of 
the microwave, cable, satellite type, etc., to the terminal of user 8 and stored in memory 
81, that can be, e.g., a hard disk. When user 8 requests to view the audiovisual sequence 
present in memory 81, two things are possible: In the first instance, user 8 does not have 
all the rights necessary to view the audiovisual stream and in this instance audiovisual 
stream 32 generated by analysis module 31 present in memory 81 is passed to synthesis 
system 86 via reading buffer memory 83 that does not modify it and transmits it 
identically to a reader capable of decoding it 87, and its content, degraded visually and/or 
auditorily by scrambling module 3 1 is displayed on viewing screen 9. 
[0064] In the second instance, server 3 decides that user 8 has the rights to view the 
audiovisual stream. In this instance, synthesis module 86 makes a viewing request to 
server 3 containing complementary information 33 necessary for recomposition of 
original sequence 1. Server 3 then sends complementary information 33 via 
telecommunication networks of the analog or digital telephone line type, DSL (Digital 
Subscriber Line) or BLR (Loop Local Radio) type, via DAB networks (Digital Audio 
Broadcasting) or via digital mobile telecommunication networks (GSM, GPRS, UMTS) 
7, which permits reconstitution of the original audiovisual stream in such a manner that 
user 8 can store it in buffer memory 85. Networks can advantageously be of the same 
type as network 5. 

[0065] Network 7 can advantageously be combined with network 5. 
[0066] Synthesis module 86 then proceeds to the recomposition of the original 
audiovisual stream from the modified main stream that it reads in its reading buffer 
memory 83 and from the complementary information read in buffer memory 85 that 
permits it to recognize the positions as well as the original values of the modified data. 
The audiovisual stream reconstituted in the original format is sent to reader-decoder 87 
corresponding to this format. The original reconstituted audiovisual stream is then 
displayed on viewing screen 9 of user 8. 
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[0067] Modified main stream 32 is advantageously passed directly via network 5 to 
reading buffer memory 83 then to synthesis module 86. 

[0068] Modified main stream 32 is advantageously inscribed (recorded) on a physical 

support like a disk of the CD-ROM or DVD type, a hard disk or a memory card 4. 

Modified main stream 32 is then read from physical support 4 by reader 82 of box 8 to be 

transmitted to reading buffer memory 83, then to synthesis module 86. 

[0069] Complementary information 33 is advantageously recorded on a physical 

support 6 with a credit card format constituted of a smart card or a flash memory card. 

This card 6 is then read by card reader 84 of the apparatus of user 8. 

[0070] Card 6 advantageously contains the algorithms and the modelings of the 

generator of pseudorandom sequences that will be executed by synthesis system 86. 

[0100] Apparatus 8 is advantageously an autonomous, portable and mobile system. 
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